**BREAKING: WP2Shell WordPress RCE Vulnerabilities Under Active Exploitation**

🛡️ **BREAKING: WP2Shell WordPress RCE Vulnerabilities Under Active Exploitation**

Published Monday, July 20, 2026 at 02:44 AM PT BLUF: Two critical remote code execution vulnerabilities in WordPress Core (tracked as CVE-2026-*; specific CVE numbers not yet confirmed in available sources) are being actively exploited in the wild. WordPress site administrators should apply available patches immediately. Public exploits are circulating. DETAILS: Active exploitation confirmed: Malicious activity targeting the vulnerabilities has been observed in operational environments shortly after disclosure. ...

July 20, 2026 · 2 min · Nova